Information Security Manager

American Express; Roma; Ibrido; EUR 60.000 - 80.000; Tempo pieno

Descrizione del lavoro

A global financial services company is looking for a Regional Information Security Officer to manage information security control enforcement and incident management. The ideal candidate has over 5 years of experience in Information Security and is proficient in both Italian and English, with strong communication and planning skills. The role includes reporting on cybersecurity effectiveness and supporting regulatory audits while offering a flexible working model with various benefits.

Servizi

Comprehensive medical, dental, vision, life insurance

Flexible working model

Free access to wellness centers

Career development opportunities

Generous paid parental leave policies

Competenze

• 5+ years of Information Security or Technology Risk Management experience.
• Experience working with audits and regulators in complex regulated businesses.
• Broad understanding of information security disciplines.

Mansioni

• Support interconnection between technology risk and information security.
• Deliver leadership reporting for cybersecurity effectiveness.
• Support regulatory audits and examinations.
• Assess operation effectiveness of security controls.

Conoscenze

Excellent verbal and written communication skills

Proficiency in Italian and English

Proven ability to build relationships

Strong organization and planning skills

Ability to work independently

Knowledge of information security standards

Keen attention to detail

5+ years of Information Security experience

Experience working with audits

Broad understanding of information security disciplines

Formazione

Security-related certifications

Descrizione del lavoro

Social network you want to login/join with:

At American Express, our culture is built on a 175-year history of innovation, shared and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

The Regional Information Security Officer (RISO) organization is responsible for information security control enforcement, incident management, regulatory change, cybersecurity awareness, reporting and enablement for American Express European legal entities.

Key Responsibilities Include:

• Supporting the interconnection between core enterprise technology risk and information security functions and American Express European legal entities.
• Deliver leadership reporting and risk metrics that demonstrate the effectiveness of the cyber security program to American Express European legal entities.
• Support regulatory audit and examinations for Info Sec and Tech functions, including close partnership with the Privacy Office, Compliance, General Council, CRO teams and the broader Information Security organization.
• Support on regulatory change management for topics such as DORA, Operational Resilience and EU AI Act.
• Support cyber incident management processes.
• Assess the design effectiveness and operating effectiveness of information security controls upon which the American Express European legal entities rely to protect Confidentiality, Availability, and Integrity of Information and Systems.
• Consult on EMEA Business & Technologies projects to ensure appropriate security protection.
• Operate as part of the extended Information Security team in support of all security and compliance initiatives.
  Maintain EMEA reporting boundaries and operate relevant governance processes.

Minimum Qualifications:

• Excellent verbal and written communication skills, including the ability to translate technical concepts into clean business language.
• Proficiency in Italian and English.
• Proven ability to build relationships and work collaboratively in a complex matrix environment.
• Strong organization and planning skills.
• Ability to work independently as part of a geographically dispersed team.
• Knowledge of applicable information security standards and regulatory requirements.
• Keen attention to detail.
• 5+ years of Information Security or Technology Risk Management experience.
• Experience working with audits and regulators requirements and in complex, regulated businesses.
• Broad understanding of information security disciplines
• Experience in risk assessment and relevant methodologies including quantitative risk management techniques.
• Security-related certifications are desirable.

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Support for financial-well-being and retirement
• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
• Generous paid parental leave policies (depending on your location)
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.